CVE-2022-20765
Medium
Description
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom JavaScript to affected web applications. A successful exploit could allow the attacker to rewrite web page content, access sensitive information stored in the applications, and alter data by submitting forms.
SeverityMedium
CVSS4.8
Exploit probability—
Product
Cisco Ucs Director
PublishedMay 27, 2022
First seenMay 27, 2022
Weakness typeCWE-80CWE-80
How to fix
Update
- cisco ucs_director6.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ucs_director | v < 6.6 | 6.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.